Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/v4NAKBMDWaD_7iFMbIplO1ouPYk.roa
File:                     v4NAKBMDWaD_7iFMbIplO1ouPYk.roa (raw, json)
Hash identifier:          gOO+SVkV2KXOr9AsfxbvohUauXgJ5PZp4ctqF6mRSBA=
Subject key identifier:   BF:83:40:28:13:03:59:A0:FF:EE:21:4C:6C:8A:65:3B:5A:2E:3D:89
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       018FE8A96A571F19323A7DB3D93263E47627
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/v4NAKBMDWaD_7iFMbIplO1ouPYk.roa
Signing time:             Wed 05 Jun 2024 13:49:27 +0000
ROA not before:           Wed 05 Jun 2024 13:49:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8492
IP address blocks:        37.77.129.0/24 maxlen: 24
                          37.77.130.0/23 maxlen: 23
                          37.77.132.0/24 maxlen: 24
                          37.77.133.0/24 maxlen: 24
                          37.77.134.0/23 maxlen: 23
                          37.221.200.0/23 maxlen: 23
                          37.221.203.0/24 maxlen: 24
                          37.221.204.0/23 maxlen: 23
                          37.221.206.0/24 maxlen: 24
                          46.34.134.0/24 maxlen: 24
                          46.34.136.0/21 maxlen: 21
                          46.34.148.0/22 maxlen: 22
                          46.229.208.0/22 maxlen: 22
                          46.229.208.0/23 maxlen: 23
                          46.229.210.0/23 maxlen: 23
                          46.229.210.0/24 maxlen: 24
                          46.229.211.0/24 maxlen: 24
                          46.231.208.0/24 maxlen: 24
                          46.231.209.0/24 maxlen: 24
                          46.231.210.0/23 maxlen: 23
                          46.231.212.0/23 maxlen: 23
                          46.231.214.0/23 maxlen: 23
                          46.231.214.0/24 maxlen: 24
                          46.231.215.0/24 maxlen: 24
                          62.32.64.0/24 maxlen: 24
                          62.32.66.0/23 maxlen: 23
                          62.32.68.0/23 maxlen: 23
                          62.32.70.0/24 maxlen: 24
                          62.32.73.0/24 maxlen: 24
                          62.32.74.0/24 maxlen: 24
                          62.32.75.0/24 maxlen: 24
                          62.32.76.0/24 maxlen: 24
                          62.32.83.0/24 maxlen: 24
                          62.32.88.0/24 maxlen: 24
                          62.32.89.0/24 maxlen: 24
                          62.32.90.0/24 maxlen: 24
                          62.32.91.0/24 maxlen: 24
                          62.32.94.0/24 maxlen: 24
                          79.134.192.0/24 maxlen: 24
                          79.134.193.0/24 maxlen: 24
                          79.134.194.0/23 maxlen: 23
                          79.134.196.0/23 maxlen: 23
                          79.134.198.0/23 maxlen: 23
                          79.134.200.0/21 maxlen: 21
                          79.134.208.0/22 maxlen: 22
                          79.134.212.0/24 maxlen: 24
                          79.134.213.0/24 maxlen: 24
                          79.134.214.0/23 maxlen: 23
                          79.134.216.0/22 maxlen: 22
                          79.134.220.0/23 maxlen: 23
                          79.134.222.0/23 maxlen: 23
                          79.142.80.0/21 maxlen: 21
                          79.142.88.0/22 maxlen: 22
                          79.142.92.0/24 maxlen: 24
                          80.79.64.0/21 maxlen: 21
                          80.79.72.0/22 maxlen: 22
                          80.79.76.0/24 maxlen: 24
                          80.79.79.0/24 maxlen: 24
                          80.250.80.0/24 maxlen: 24
                          80.250.83.0/24 maxlen: 24
                          80.250.87.0/24 maxlen: 24
                          80.250.88.0/21 maxlen: 21
                          85.114.0.0/19 maxlen: 19
                          85.114.0.0/22 maxlen: 22
                          85.114.4.0/22 maxlen: 22
                          85.114.8.0/21 maxlen: 21
                          85.114.16.0/20 maxlen: 20
                          85.114.28.0/24 maxlen: 24
                          87.236.80.0/22 maxlen: 22
                          87.236.80.0/23 maxlen: 23
                          87.236.80.0/24 maxlen: 24
                          87.236.81.0/24 maxlen: 24
                          87.236.82.0/23 maxlen: 23
                          87.236.82.0/24 maxlen: 24
                          87.236.83.0/24 maxlen: 24
                          87.236.84.0/23 maxlen: 23
                          87.236.84.0/24 maxlen: 24
                          87.236.85.0/24 maxlen: 24
                          87.249.55.0/24 maxlen: 24
                          89.104.97.0/24 maxlen: 24
                          89.104.115.0/24 maxlen: 24
                          89.104.118.0/24 maxlen: 24
                          89.223.1.0/24 maxlen: 24
                          89.223.12.0/24 maxlen: 24
                          92.255.40.0/24 maxlen: 24
                          92.255.41.0/24 maxlen: 24
                          92.255.44.0/24 maxlen: 24
                          92.255.45.0/24 maxlen: 24
                          92.255.46.0/24 maxlen: 24
                          92.255.47.0/24 maxlen: 24
                          92.255.51.0/24 maxlen: 24
                          93.191.58.0/24 maxlen: 24
                          93.191.60.0/24 maxlen: 24
                          93.191.63.0/24 maxlen: 24
                          95.161.144.0/21 maxlen: 21
                          95.161.152.0/22 maxlen: 24
                          95.161.156.0/22 maxlen: 22
                          95.161.160.0/20 maxlen: 20
                          95.161.164.0/22 maxlen: 22
                          95.161.176.0/22 maxlen: 22
                          95.161.180.0/22 maxlen: 22
                          95.161.188.0/22 maxlen: 22
                          95.161.192.0/22 maxlen: 22
                          95.161.200.0/21 maxlen: 21
                          95.161.208.0/22 maxlen: 22
                          95.161.212.0/24 maxlen: 24
                          95.161.213.0/24 maxlen: 24
                          95.161.214.0/23 maxlen: 23
                          95.161.216.0/23 maxlen: 23
                          95.161.218.0/23 maxlen: 23
                          95.161.220.0/24 maxlen: 24
                          95.161.221.0/24 maxlen: 24
                          95.161.222.0/23 maxlen: 23
                          95.161.228.0/22 maxlen: 22
                          95.161.232.0/22 maxlen: 22
                          95.161.236.0/22 maxlen: 22
                          145.255.232.0/24 maxlen: 24
                          145.255.233.0/24 maxlen: 24
                          145.255.234.0/23 maxlen: 23
                          145.255.236.0/22 maxlen: 22
                          149.126.16.0/22 maxlen: 22
                          149.126.20.0/23 maxlen: 23
                          149.126.22.0/24 maxlen: 24
                          149.126.23.0/24 maxlen: 24
                          178.16.144.0/22 maxlen: 22
                          178.16.148.0/23 maxlen: 23
                          178.16.150.0/24 maxlen: 24
                          178.16.151.0/24 maxlen: 24
                          178.16.152.0/22 maxlen: 22
                          178.16.156.0/24 maxlen: 24
                          178.16.158.0/23 maxlen: 23
                          185.7.232.0/22 maxlen: 22
                          185.17.84.0/23 maxlen: 23
                          185.81.220.0/22 maxlen: 22
                          185.102.8.0/22 maxlen: 22
                          185.102.10.0/24 maxlen: 24
                          185.119.0.0/22 maxlen: 22
                          185.171.192.0/22 maxlen: 22
                          185.241.176.0/22 maxlen: 22
                          217.79.0.0/22 maxlen: 22
                          217.79.4.0/23 maxlen: 23
                          217.79.6.0/23 maxlen: 23
                          217.79.8.0/24 maxlen: 24
                          217.79.9.0/24 maxlen: 24
                          217.79.10.0/23 maxlen: 23
                          217.79.12.0/23 maxlen: 23
                          217.79.14.0/24 maxlen: 24
                          217.79.15.0/24 maxlen: 24
                          2a01:590::/32 maxlen: 32
                          2a05:a400::/29 maxlen: 29
                          2a05:a406::/32 maxlen: 32
                          2a05:a407::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 06:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e8:a9:6a:57:1f:19:32:3a:7d:b3:d9:32:63:e4:76:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Jun  5 13:49:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bf834028130359a0ffee214c6c8a653b5a2e3d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:d7:38:26:59:21:41:84:10:61:f5:b7:a0:
                    51:e6:3e:67:99:e5:07:64:c7:9a:94:e5:8f:89:1f:
                    32:67:d2:a5:a8:3b:74:09:9d:4d:6f:d7:34:0e:bb:
                    41:51:02:41:0c:13:8e:89:df:ba:85:f6:d5:d8:dd:
                    f2:16:1b:e5:39:86:63:7d:ad:90:f8:3a:47:6c:3c:
                    fc:a5:1f:51:72:bb:e7:b7:0e:ef:33:77:40:6e:dd:
                    95:bd:51:e7:30:e2:69:42:c4:24:f0:57:6a:00:49:
                    54:0c:93:3c:3f:85:34:4d:94:51:4d:12:d6:75:f9:
                    3a:9d:20:d2:48:51:8a:d6:17:f1:26:6c:14:d8:63:
                    55:92:85:ed:55:5f:df:09:c2:89:4d:92:5a:27:ed:
                    11:78:1a:a6:6d:06:d8:e6:ef:c0:b4:58:25:bc:62:
                    28:96:e7:68:1b:93:80:28:3b:23:51:db:d2:67:55:
                    ac:81:b0:1c:c4:56:0c:ae:d6:d1:1c:d6:ea:ef:cb:
                    9e:74:1a:08:46:45:2c:7f:b2:87:81:d1:fe:26:49:
                    c6:b8:c9:6f:cf:74:ae:50:d4:37:bc:42:4c:ca:1a:
                    ac:69:80:a5:bd:6f:1d:c5:52:70:e6:7b:c8:8e:0f:
                    61:cd:d4:eb:05:05:22:f1:07:02:1f:e4:27:be:7f:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:83:40:28:13:03:59:A0:FF:EE:21:4C:6C:8A:65:3B:5A:2E:3D:89
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/v4NAKBMDWaD_7iFMbIplO1ouPYk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.129.0-37.77.135.255
                  37.221.200.0/23
                  37.221.203.0-37.221.206.255
                  46.34.134.0/24
                  46.34.136.0/21
                  46.34.148.0/22
                  46.229.208.0/22
                  46.231.208.0/21
                  62.32.64.0/24
                  62.32.66.0-62.32.70.255
                  62.32.73.0-62.32.76.255
                  62.32.83.0/24
                  62.32.88.0/22
                  62.32.94.0/24
                  79.134.192.0/19
                  79.142.80.0-79.142.92.255
                  80.79.64.0-80.79.76.255
                  80.79.79.0/24
                  80.250.80.0/24
                  80.250.83.0/24
                  80.250.87.0-80.250.95.255
                  85.114.0.0/19
                  87.236.80.0-87.236.85.255
                  87.249.55.0/24
                  89.104.97.0/24
                  89.104.115.0/24
                  89.104.118.0/24
                  89.223.1.0/24
                  89.223.12.0/24
                  92.255.40.0/23
                  92.255.44.0/22
                  92.255.51.0/24
                  93.191.58.0/24
                  93.191.60.0/24
                  93.191.63.0/24
                  95.161.144.0-95.161.183.255
                  95.161.188.0-95.161.195.255
                  95.161.200.0-95.161.223.255
                  95.161.228.0-95.161.239.255
                  145.255.232.0/21
                  149.126.16.0/21
                  178.16.144.0-178.16.156.255
                  178.16.158.0/23
                  185.7.232.0/22
                  185.17.84.0/23
                  185.81.220.0/22
                  185.102.8.0/22
                  185.119.0.0/22
                  185.171.192.0/22
                  185.241.176.0/22
                  217.79.0.0/20
                IPv6:
                  2a01:590::/32
                  2a05:a400::/29

    Signature Algorithm: sha256WithRSAEncryption
         c4:26:3c:e9:66:58:15:fb:32:63:00:de:19:b1:2d:8c:85:51:
         0a:02:d7:83:ff:02:9f:44:7f:e3:f7:84:8e:0a:d1:90:bd:43:
         da:35:32:95:d7:e8:39:09:5d:a1:b4:8a:54:23:7d:2c:53:c3:
         7a:7d:66:5f:c6:09:ca:8c:90:b4:77:27:cc:59:90:96:cf:d5:
         d5:5c:d9:df:b7:19:9c:73:b1:ea:70:ae:c3:96:8b:98:7c:9e:
         26:15:12:59:f9:61:4f:ab:2f:8b:dd:e7:2f:56:76:62:69:e4:
         4e:28:cc:1b:62:c6:3a:85:a8:c5:63:04:39:d9:9c:c5:79:72:
         3a:c9:e6:2c:4c:84:c8:a7:b7:c8:eb:18:66:7f:81:88:4a:a1:
         71:f0:d3:59:41:26:b1:46:37:a2:30:90:ba:89:4d:27:cf:0b:
         62:32:0d:e9:ca:b5:7a:b1:2d:42:6a:04:1c:66:74:de:85:3c:
         e9:30:2f:d7:e0:8a:6b:56:22:70:6b:d9:03:50:3e:42:c0:79:
         b8:4b:60:f5:de:ec:e0:14:7f:8b:61:c9:89:84:16:0d:d1:b2:
         e8:32:48:df:eb:d1:a0:ae:3f:58:a3:60:ab:d9:77:43:4f:dd:
         c8:05:3d:4b:39:63:e0:24:f7:fa:bf:07:f6:67:6f:81:2e:99:
         6d:36:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org